Privacy policy.
Last updated: October 2026
Who is responsible for your data
The data controller is Cristian Rojas Gálvez, who works under the name Rocco Studio from Buin, Chile. It is a one-person studio, so whoever reads your message is the same person accountable for your data. For anything to do with it, write to roccostudiochile@gmail.com.
What we collect
We only hold data you choose to give us. There are two ways that happens.
- The contact form. We ask for your name, your email and a message about what you need, which are required so we can reply. Everything else is optional: your business, the services you are interested in, your current site or social accounts, your timeline and a budget range.
- If you write to us directly by email or Instagram, we receive your contact address and whatever you tell us.
What we do not do. This site has no analytics of any kind. We do not use Google Analytics, the Meta pixel or any ad tracking tools. We do not build profiles or make automated decisions about you.
What we use it for and on what legal basis
The law requires every use of your data to rest on a legal basis. These are ours.
- Replying to your enquiry or sending a quote. A step prior to a possible contract, which you asked for by writing to us.
- Carrying out a job, if we agree on one. Based on the contract between us.
- Keeping invoices and accounting records. A legal tax obligation.
- Keeping the site secure. Technical access logs help prevent abuse and attacks, a legitimate interest that does not affect your rights.
We do not use your data for advertising, we do not add you to any mailing list and we do not sell it to anyone.
Who we share it with
We do not sell or hand over your data. It does pass through the technical providers that run the site and email, and all three are outside Chile, which makes this an international data transfer.
- Web3Forms processes the form submission and forwards it to us by email.
- Google hosts our mailbox, so messages are stored there.
- Cloudflare hosts the site and keeps technical access logs, such as IP addresses.
- Meta processes the messages, if you choose to write to us on Instagram.
That transfer is necessary for us to receive and answer what you send, and we use providers that publish their security and data protection commitments. Each handles that data under its own policies.
YouTube only connects if you play one of the videos on the cases page. The thumbnails are stored on our own site, so until you press play your browser does not talk to YouTube.
How long we keep it
If we talk and do not end up working together, we delete your message no later than twelve months after our last contact. If we do work together, we keep what tax and accounting law requires for as long as it requires. You can ask us at any time to delete earlier anything we are not legally bound to keep.
Your rights
Regarding your data, you can ask us for the following.
- Access. Know what data of yours we hold and why.
- Rectification. Correct it if it is wrong or incomplete.
- Erasure. Have it deleted.
- Objection. Stop us using it for a given purpose.
- Portability. Receive it in a structured format to take elsewhere.
- Blocking. Suspend its use while a request of yours is being resolved.
Write to roccostudiochile@gmail.com. We reply within ten business days, well ahead of the thirty calendar days the law sets as the maximum. There is no charge and we will not ask you why.
If you are not satisfied with our answer, you can file a complaint with Chile's Personal Data Protection Agency.
These rights are recognised by Chilean Law 19.628 on the protection of private life, as amended by Law 21.719, in force from 1 December 2026.
Security
The site runs over an encrypted connection and your messages are kept in a personal-access mailbox. Should an incident ever put your data at risk, we would tell you directly and notify the authority within the time the law requires.
Minors
This site is not aimed at minors and we do not ask for their data. If you believe a minor has sent us data, write to us and we will delete it.
If you hire us
This policy covers visitors to roccostudio.cl. It is separate from the work we do for clients. If the service you hire involves handling data about your customers, patients, students or residents, you are the controller of that data and we act as your processor. That is agreed in writing before we start, detailing what data is involved, for what purpose, where it is stored, who has access and what happens to it when the work ends. That agreement takes precedence over this document.
Cookies
See the detail in our Cookie Policy.
Changes
If we update this policy, we will change the date above. If a change affects how we use data you have already given us, we will tell you directly.